$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa File: 40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa (raw, json) Hash identifier: YPhu1BctxXdEZ3aB71dvIPm26uFBzmSmk3oL+x/GyAo= Subject key identifier: B1:2F:90:CB:26:D8:A1:FA:90:1F:B1:61:BE:40:EA:5C:D3:37:5E:77 Certificate issuer: /CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Certificate serial: 010D0C9F4328584C9C31BC689407236BAFA91080 Authority key identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 35972 IP address blocks: 23.130.236.0/24 maxlen: 24 2602:f76d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:bc:68:94:07:23:6b:af:a9:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=9e9870dc-e63d-4cb6-87ae-a35aab6d0129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:61:27:b0:16:4e:70:17:de:21:4a:cc:57:87: 13:c1:5e:17:8b:7c:f8:e8:dd:9d:48:7e:bd:bf:cc: 81:ed:c6:e9:9a:af:b7:25:8e:9a:3d:36:b5:9b:55: 50:6c:cd:52:1a:6f:0b:8e:95:50:c6:62:b0:2e:dc: e9:75:4a:0b:64:80:f3:34:19:0b:74:fa:46:db:95: 80:fc:5b:1e:7a:66:d6:e0:04:27:f9:36:44:00:3b: 4b:08:05:f4:d7:5a:6a:d1:4a:75:28:5d:3f:2c:85: 7d:d2:26:f5:cb:48:5b:ec:a9:3c:f1:70:74:77:28: 32:6a:c7:80:6e:a9:2a:5b:e9:88:c1:f0:5e:e3:ec: dd:73:58:c1:67:e7:f1:ba:75:44:41:1b:34:1a:2d: ec:ca:bb:16:1e:6d:dd:72:7a:71:bc:34:42:db:63: d4:f7:98:16:f5:ae:38:e6:a7:d0:55:47:cd:37:79: 04:74:9b:a3:53:46:24:ac:15:70:a5:80:aa:8e:de: 31:67:05:cb:e3:c5:9d:2e:65:65:ee:41:9b:bb:89: a0:eb:fc:80:cd:0c:fe:de:a5:06:6f:5f:56:d4:19: 1a:1d:67:54:c5:e1:d4:27:73:00:87:5f:57:e7:e9: 51:f7:2f:a3:6b:39:35:8c:07:20:28:24:14:46:cf: cb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2F:90:CB:26:D8:A1:FA:90:1F:B1:61:BE:40:EA:5C:D3:37:5E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl X509v3 Authority Key Identifier: keyid:5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer sbgp-ipAddrBlock: critical IPv4: 23.130.236.0/24 IPv6: 2602:f76d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e2:0d:05:23:4d:f6:c3:43:be:f5:50:03:8f:41:b0:cf:6b: c3:a2:16:a5:9d:fb:7f:4b:64:0a:a2:ab:f9:88:a6:38:59:af: af:79:98:68:56:2f:cc:f8:ae:ad:11:c5:06:42:6a:7e:e8:e0: 20:0e:b7:99:b5:ad:a2:3a:d7:e7:26:a3:e2:e1:2e:ce:cb:e7: 94:22:5d:74:8b:93:b5:07:7c:c0:a1:05:21:a0:70:f8:85:a7: a5:fc:80:39:2e:26:fc:3b:b5:ef:e2:ae:73:8b:66:6d:d9:55: cc:28:5f:aa:3c:29:93:36:54:ff:ad:58:c7:00:04:6d:43:11: 70:e1:32:cc:9e:61:3d:56:a8:e9:d0:cc:12:f9:7f:21:68:d2: 69:c2:ce:ff:0c:01:a9:4e:35:33:e8:57:60:4c:5a:73:0e:8d: 77:34:8a:66:77:d2:f4:d4:40:38:43:99:dc:fd:bb:cf:80:5b: 5f:ff:69:06:9c:f8:cc:dc:33:f7:b2:cc:d4:59:98:dc:97:c4: 6c:58:a3:df:41:b9:8b:d3:67:ac:aa:e5:26:2e:7b:e3:92:ad: 0a:ee:40:d3:a1:35:0b:4e:16:92:64:7f:6f:2a:59:41:63:b7: 94:c4:75:da:a7:83:de:d7:b6:5d:c5:fe:0d:2a:a2:f5:b0:b6: 2d:37:27:cb -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEycMbxolAcja6+pEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhNGI3ZGMtNmU0My00MjkwLTg2ZDYtODRlODExMzlm MTY0MB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk OWU5ODcwZGMtZTYzZC00Y2I2LTg3YWUtYTM1YWFiNmQwMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGEnsBZOcBfeIUrMV4cTwV4Xi3z46N2dSH69 v8yB7cbpmq+3JY6aPTa1m1VQbM1SGm8LjpVQxmKwLtzpdUoLZIDzNBkLdPpG25WA /FseembW4AQn+TZEADtLCAX011pq0Up1KF0/LIV90ib1y0hb7Kk88XB0dygyaseA bqkqW+mIwfBe4+zdc1jBZ+fxunVEQRs0Gi3syrsWHm3dcnpxvDRC22PU95gW9a44 5qfQVUfNN3kEdJujU0YkrBVwpYCqjt4xZwXL48WdLmVl7kGbu4mg6/yAzQz+3qUG b19W1BkaHWdUxeHUJ3MAh19X5+lR9y+jazk1jAcgKCQURs/LLQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLEvkMsm2KH6kB+xYb5A6lzTN153MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0 YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEzOWYxNjQvNDBmMWJlM2ItMjFhYi0z ZTBkLWJiOTEtYzdjMzFkZGUwNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmRhNGI3ZGMtNmU0My00MjkwLTg2 ZDYtODRlODExMzlmMTY0LzJkYTRiN2RjLTZlNDMtNDI5MC04NmQ2LTg0ZTgxMTM5 ZjE2NC5jcmwwHwYDVR0jBBgwFoAUWi3iX0nJqZfOibJXvqQfII4OLs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4 MTEzOWYxNjQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4LsMA4E AgACMAgDBgQmAvdtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBw4g0FI032w0O+9VADj0Gwz2vDohalnft/ S2QKoqv5iKY4Wa+veZhoVi/M+K6tEcUGQmp+6OAgDreZta2iOtfnJqPi4S7Oy+eU Il10i5O1B3zAoQUhoHD4hael/IA5Lib8O7Xv4q5zi2Zt2VXMKF+qPCmTNlT/rVjH AARtQxFw4TLMnmE9Vqjp0MwS+X8haNJpws7/DAGpTjUz6FdgTFpzDo13NIpmd9L0 1EA4Q5nc/bvPgFtf/2kGnPjM3DP3sszUWZjcl8RsWKPfQbmL02esquUmLnvjkq0K 7kDToTULThaSZH9vKllBY7eUxHXap4Pe17Zdxf4NKqL1sLYtNyfL -----END CERTIFICATE-----Generated at Mon Mar 2 09:29:08 2026 by rpki-client